Privacy Policy
Policy on personal data processing for website users pursuant to Art. 13 of EU Regulation no. 2016/679 (“GDPR”)
The company Eggtronic Engineering S.p.A. pays the utmost attention to the security and confidentiality of the personal data of users (hereinafter, the “Users” or “User” in the singular form) of the website https://www.eggtronic.com/ (hereinafter, the “Website") and wishes to provide them with information relating to the processing of their personal data.
1. Data controller
The data controller is Eggtronic Engineering S.p.A., with registered office in Via Giorgio Campagna, 8, Modena (hereinafter, the “Company”).
For any request regarding the processing of personal data, as well as to exercise the rights recognized by the GDPR and better described in point 7 below, you can contact the Company at the e-mail address info@eggtronic.com or at the telephone number +39 059 787 8110.
2. For what purposes the Company processes personal data
Through the Website, the Company collects some personal data that refers to Users, voluntarily provided by them or collected in the normal functioning of the same, which are processed for the purposes described below, including the possibility of proceeding with the purchase of the products and services offered (hereinafter, the “Products”).
During normal operations, the computer systems and software procedures used to run this Website collect various personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected with the intent of associating it with the identified subjects but, by its very nature, could allow the identification of Users through its processing, and through its association with data held by third parties. This data category includes the IP addresses, or the domain names, of the computers used by Users to connect to the Website, addresses in the URI (Uniform Resource Identifier) notation of the requested resources, time of the request, method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status (successful, error, etc.), and other parameters pertaining to the user's operating system, and IT environment. These data are used only to obtain anonymous statistical information about the use of the Site and to control the site is operating correctly, and they are deleted immediately after processing. The data could also be used to ascertain responsibility in the event of possible computer crimes damaging the Site.
The website, additionally, uses cookies and other tracking tools. Please refer to the cookie policy available at the following link as well as to the related control panel available at the following link, for further related information as well as to manage one’s own preferences in this regard at any time.
The treatments carried out by the Company are schematically reported below.
| Purpose of processing | Categories of data processed | Legal basis and provision | Storage period | |
|---|---|---|---|---|
| 1 |
Functioning of the Products.
The functioning of the Products may involve the processing of certain information attributable to the Users, as collected during their normal operation. |
Personal data and contact details. |
Performance of a contract the User is party to (Art. 6 (1) (b) GDPR). The provision of the data is necessary to allow the Products to function properly. |
For the time necessary to allow the functioning of the Products and will not be stored in any case for more than 24 months. |
| 2 |
“Generic” marketing.
Subject to express and specific consent, the Company may process the User's personal data for marketing and advertising communication purposes, aimed at informing about promotional sales initiatives. The marketing communications may be sent through automated contact methods (e-mail, SMS, instant messaging, social accounts of the Company, push notifications, services and tools made available by the social networks and other mass messaging tools) and traditional contact methods (for example, telephone call with operator). In this regard, the User may at any time indicate the contact method they prefer among those indicated above and may object to the receipt of promotional communications through all or only some of these contact methods. |
Personal data and contact details; Purchase data used exclusively to create non-personalized “clusters”. |
Consent (Art. 6 (1) (a) GDPR). The consent can be revoked at any time by submitting a request to info@eggtronic.com. |
The personal and contact data will be stored until the expiry of the last storage period referred to in the further purposes. The purchase data will be stored for 24 months from collection and continuously updated. In the event that the consent is revoked, the personal data that will continue to be stored for further lawful purposes will no longer be processed for marketing purposes. |
| 3 |
“Profiled” marketing.
The Company may also process personal data to send Users commercial communications in line with their preferences, based on a specific profile, in the event of a further specific consent being provided and always within the limits of what is described in the relative formula. The marketing communications may be sent through automated contact methods (e-mail, SMS, instant messaging, social accounts of the Company, push notifications, services and tools made available by the social networks and other mass messaging tools) and traditional contact methods (for example, telephone call with operator). In this regard, the User may at any time indicate the contact method they prefer among those indicated above and may object to the receipt of promotional communications through all or only some of these contact methods. |
Personal data and contact details, Interests, Data provided voluntarily, Purchase data |
Consent (Art. 6 (1) (a) GDPR). The consent can be revoked at any time by submitting a request to info@eggtronic.com. |
The personal and contact data will be stored until the expiry of the last storage period referred to in the further purposes. The purchase data will be stored for 12 months from collection and continuously updated. In the event that the consent is revoked, the personal data that will continue to be stored for further lawful purposes will no longer be processed for marketing purposes. |
| 4 |
Sending communications for the promotion of products and services similar to the one of a previous purchase, pursuant to Art. 130, paragraph 4, of the Privacy Code.
The Company may process the User's e-mail address to send promotional communications and material relating to products similar to those of a previous purchases. |
E-mail address acquired as part of the sale. Information relating to the type of goods or services purchased for the sole purpose of sending communications relating to similar services or products. |
The legitimate interest of the Company (Art. 6 (1) (f) GDPR) in maintaining an effective contractual relationship with you. | The data, acquired as part of the sale, will be stored as provided for the purpose under 2., but will not be further processed for this purpose in case of your objection. |
| 5 |
Defending its rights.
The Company may process the personal data to defend rights during legal, administrative or out-of-court proceedings and as part of disputes which may arise in relation to the Services. |
Depending on the circumstances, the personal data collected for purposes from 1 to 6 will be processed. |
Legitimate interest of the Company in the protection of its rights (Art. 6 (1) (f) GDPR). New and specific provision is not required since the Company will pursue this additional further purpose, where necessary, by processing the data collected for the above-mentioned purposes. |
The time necessary to pursue the protection of the right. |
| 6 |
Fulfilment of legal obligations.
The Company may process the personal data to fulfil the obligations it is bound to as envisaged by laws, regulations or by the European Commission regulations, by provisions/requests of authorities entitled to do so by law and/or by supervisory and control bodies. |
Depending on the circumstances, the personal data collected for purposes from 1 to 10 will be processed. |
Fulfilment of a legal obligation (Art. 6 (1) (c) GDPR). Provision of the personal data for this purpose is compulsory since without them the Company will be unable to fulfil specific legal obligations |
The time needed to process the request. |
3. How we keep personal data secure
The Company implements appropriate security measures to guarantee the protection, security, integrity and accessibility of the Users’ personal data. The appropriate security measures are designed to prevent unauthorised access, disclosure, modification or destruction of the personal data.
All personal data are stored on the Company’s protected computerised devices (or in properly stored hard-copy form) or on those of our providers, and are accessible and for use according to our standards and our security policies (or equivalent standards for our providers).
4. How long we store personal data
The Company stores the User’s personal data only for the time necessary to achieve the purposes for which they were collected or for any related legitimate purpose.
Personal data that are no longer needed, or for which there is no longer a legal requirement for the storage thereof, will be irreversibly anonymised or destroyed securely.
If the processing of personal data responds to several purposes, they will be deleted or made anonymous as soon as the storage period relating to the last purpose has elapsed.
5. Who we can share the personal data with
The personal data may be accessed by duly authorised employees of the Company, as well as by any external providers, who have been appointed, if necessary, as data processors, who provide support for the provision of services, including those necessary for the functioning of the website.
The Company may be contacted at the following e-mail address info@eggtronic.com to ask to see the list of the data processors and other subjects to whom we may communicate data.
6. Transfers towards Third countries
Your personal data will be processed mainly within the European Economic Area (EEA). However, the use of certain instruments by the Company may result, albeit on a residual basis, in a transfer of the same to subjects established in countries that do not belong to the European Union (EU) or the EEA (hereinafter the “Third Countries”). This transfer, in any case, is carried out in compliance with the provisions of Chapter V of the GDPR.
These external parties will process the personal data as independent data controllers or as data processors, duly appointed by the Company in accordance with the legislation on the protection of personal data (depending on the role they play in relation to the processing).
You can write to the Company at any time, using the contact details below, asking which are the subjects to whom the personal data are transmitted as well as to receive a copy of the guarantees adopted for the transfer.
7. Rights on the subject of personal data protection and the right to lodge complaints with the Supervisory Authority
Each User is entitled to ask the Company, provided there is a legal basis backing the request, to:
- access their personal data, as envisaged by Art. 15 of the GDPR;
- amend or supplement the personal data the Company has that are deemed incorrect, as envisaged by Art. 16 of the GDPR;
- delete the personal data for which the Company no longer has any legal basis to process, as envisaged by Art. 17 of the GDPR;
- limit the way the personal data are processed, if one of the circumstances envisaged by Art. 18 of the GDPR apply;
- copy the personal data provided to the Company in a structured, commonly used format that is legible from any automatic device and the transmission of the said data to another data controller (referred to as portability), as envisaged by Art. 20 of the GDPR;
- revoke the consent, where processing is founded on this legal basis.
Right to object: in addition to the rights listed hereinabove, the User always has the right to object at any time to the processing of the personal data carried out by the Company to pursue the legitimate interest thereof. In addition, the User can always object thereto at any time if the personal data are processed for marketing purposes, including profiling to the extent that it is connected to such marketing.
The exercising of the said rights, which may be effected at the contact details of the Company specified in paragraph 1, is free of charge and is not subject to any form constraints. The Company will be responsible for checking whether the User is legitimately entitled to exercise the related right and to reply, usually, within one month.
If the User believes the processing of their personal data is being effected in breach of the provisions of the GDPR, they are entitled to lodge a complaint with the Supervisory Authority using the reference details available on the website: www.garanteprivacy.it, or to take the appropriate legal action.
Last update date: May 29, 2023